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Amended claims follow: 

1 . (CurreiitJy Amended) A method executed utilizing a computer including a 
tangible computer readable medium for prioritized network security, comprising: 

(a) identifying a set of policies, each policy having a condition associated therewith; 

(b) determining whether the conditions are met; and 

(c) activating the policies whose associated conditions are determined to be met; 

(d) wherein the conditions represent a priority of the policy; 

(e) wherein a first policy with a higher priority has a first condition associated 
therewith that is different from a second condition associated with a secoiKi policy 
with a lower priority such that the first policy and second policy are activated 
under different priority -related conditions; 

(f) wherein the activation of the policies includes: 

adding the poli cies to a set of a plurality of active policies, and executing 
security actions associated with the active policies if associated limits are met; 
and 

identifying currently executed security actions, determining whetlier a 
conflict exists between the currently executed security actions, and resolving any 
contlicls between tlie currently executed security actions; 

(g) wherein the conditions include a time factor, the time factor including at least one 
of a timeframe, a predetennined time period, and a time limit: 

(h) wherein the conditions include a source of the policies^ 

(i) wherein the conditions include a severity of secutity actions associated \sith ihe 
policies , 

2. (Original) The method as recited in claim 1 , and further comprising determining 
whether a user confirms the activation of the policies. 
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3 . (Original) The method as recited in claim 2, and further comprising activating the 
policies if the user contirms . 

4. (Origiiial) The method as recited m claim 1, and furtlier comprising updating the 
set of policies. 

5. (Originai) The method as recited in claim 4, wherein the updating includes 
receiving another inactive policy, deterniining whether the user accepts the 
inactive policy, and adding the inactive policy to the set if the user accepts the 
inactive policy. 

6. (Ganceiied) 

7. (Previously Presented) The method as recited in claim I , and further comprising 
determining whetlier the conditions associated with tlie active policies are still 
met, and de-activating the active policies if the associated conditions are not met. 

8. (Cancelled) 

9. (Cancelled) 

10. (Cancelled) 

11. (Canceiied) 

12. (Currently Amended) A computer program product embodied on a tangible 
computer readable medium for prioritized network security, comprising; 

(a) computer code for identiiying a set of policies, each policy having a condition 
associated therewith; 

(b) computer code for determining whether the conditions are met; and 
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(c) computer code for activating the policies whose associated conditions are 
determined to be met; 

(d) wherein the conditions represent a priority of tfie policy; 

(e) wherein a first policy with a higher priority has a first condition associated 
tiierewith that is different from a second condition associated with a second policy 
with a iower priorit>- such that the first policy and second policy are activated 
under dilFerent priority-related conditions; 

(f) wherein the activatt on of the pol i cies i nvolves : 

computer code for adding the policies to a set of a plurality of active 
policies, and executing securit>f actions associated with the active policies if 
associated !initits are met; and 

computer code for identifying cunently executed security actions, 
determining whether a conflict exists between the currently executed security 
actions, and resolving any conflicts between the currently executed security 
actions; 

(g) wherein the conditions include a time factor, the time factor including at least one 
of a timeframe, a predetermined tifiie period, and a time limit; 

(h) wherein the conditions include a source of the poli cies^ 

f i ) wherein the conditions include a severity of security actions associated witli the 
policies . 

13. (Original) The computer program product as recited in claim 12, and further 
comprising computer code for detennining whether a user confinns the activation 
of the policies. 

14. (Original) The computer program product as recited in ciaim 1 3, and further 
comprising computer code for activating the policies if the user confirms. 
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(Originai) The computer program product as recited in claim 12, and further 
comprising computer code for updating the set of policies. 
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1 6. (Origina!) T he computer program product as recited in claim 15, wherein the 
updating includes receiving another inactive policy, determining whether the user 
accepts the inactive policy, and adding the inactive poiicy to the set if the user 

accepts the inactive poiicy, 

17. (Canceikd) 

18. (Previously Presented) The computer program product as recited in claim 12, and 
further comprising computer code for detennining whether the conditions 
associated with the active policies are stil! met, and de-activating the active 
policies if the associated conditions are not met. 

19. (Cancelled) 

20. (Cancelied) 

21. (Cancelled) 

22. (Caiicelied) 

23 . (Currently Amended) A sy stem including a computer \vi ih a tangible computer 

readable medium for prioritized network security, comprising: 

(a) logic for identifying a set of policies, each policy ha vi ng a condition associated 
therewith; 

(b) logic for determining whether the conditions are met; and 

(c) h-)gic for activating the policies whose associated conditions are determined to be 
met; 

(d) wherein the conditions represent a priority of the policy; 

(e) wherein a first policy with a higher priority has a first condition associated 
therev\'ith that is ditTerent from a second condition associated with a second poiicy 
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with a lower pdority such that the ftrst policy and second policy are activated 
under difTerent priority-related conditions; 

(f) wherein the activation of the policies involves 

logic for adding the policies to a set of a pluralit}' of active policies, and 
executing security actions associated witli the active policies if associated limits 
are met; ajid 

logic for identityiiig currently executed security actions, detennining 
whether a cotiflict exists between the currently executed security actions, and 
resolving any conflicts between the currently executed security actions; 

(g) wherein the conditions include a time factor, the time factor including at ieast one 
of a timeframe, a predetermined time period, and a time limit; 

(h) wherein the conditions include a source of the policies^ 

(i> wherein the conditions include a severity of securit>' actions associated with the 
policies . 

24. (Cancelled) 

25. (Cancened) 

26. (Cancelled) 

27. (Cancelled) 

28. (Currently Amended) A method executed utilizing a computer including a 
tangible computer readable medium for prioritized network security, comprising: 

(a) identifying a set of policies, each policy having a condition associated therewith; 

(b) determining whether the conditions are met; and 

(c) acti valing the policies whose associated condi tions are determi ned to be met; 

(d) wherein the conditions represent an urgency associated with an issue causing the 
policy to be activated; 
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(e) wherein a first policy with a higher associated urgency has a first condition 

associated therewith that is different from a. second condition associated with a 
second poliLS uuhalimes ^J•^■^o^_. .'cJ j^erc\ such thanbc fit si poUc\ jnd the 
second pohc\ arc actixotcd undci aarcroin uiyt'tKN-u-laU'd condtuon^ 

(t) wherein the act! vauoii of die policies inchides: 

adding the policies to a set of a plurality of active policies, and executing 
security actions associated with the active policies if associated limits are met; 
and 

identifying currently executed security actions, determining whether a 
conflict exists between the currently executed security actions, and resolving any 
conflicts between the currently executed security actions; 

(g) wherein the conditions inchide a time factor, the time factor incUiding at least one 
of a timeframe, a predetermined time period, and a time limit; 

( h) wherei n the con diti ons i ncl ude a source of the polici es. 

f i) wherein the conditions include a severity of security actions associated with the 
poiicies . 

29. (Currently Amended) A method executed utilizing a computer including a 

tangible computer readable medium for providing network security, comprising: 

(a) identifying a set of a plurality of inactive policies each including a security action, 
a condition for activating the policy, and a limit for triggering the security action 
if the pol icy is active; 

(b) updating the set of inactive policies including; 

(i) receiving another inactive poNcy, 

(ii) detennining whether the user accepts the inactive policy, and 

(iii) adding the inactive policy to the set if the user accepts the inactive policy; 

(c) determining whether the conditions are met for the inactive policies; 

(d) determining whether a user confirms the activation of the inactive policies if the 
associated conditions are met; and 

(e) activating the inactive policies if the user confirms, the activation including: 
(i) adding the inactive policies to a set of a plurality of active policies, 
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(ii) detemiiiiing whether the conditions associated with the active policies are 
still met, 

(iii) de-activating the active policies if the associated conditions are not met, 
and 

(iv) executing the security actions associated with the active policies if the 
associated conditions are met and the limits are met. the execution of tl>e 
security actions including; 

(1 ) identifying currently executed security actions, 

(2) deterroining whether a conflict exists between the currently 

executed securitN'- actions, and 

(3 ) resolving any conflicts between the currently executed security 
actions; 

(f) wherein the conditions include a time factor, the time factor including at least one 
of a timeframe, a predetennined time period, and a ti me limit; 

(g) wherein the conditions include a source of the policies; 

(h) wherein the conditions include a severity of security actions associated with the 
policies . 

30. (Previously Presented) 'Hie method as recited in ciaim I , wherein tlie policies 
include low priority policies that are default policies which do not expire. 

31. {Previously Presented) The method as recited in claim i, wherein the policies 
include medium priority policies that are valid for the predetermined time period. 

32. (Previously Presented) The method as recited in claim 3 1, wherein the policies 
include high priority policies that are valid for another predetermined time period that is 
less than tlie predetermined time period associated with the medium priority policies. 

33 . (Previously Presented) Tlie method as recited in claim 1, wherein the identifying 
the set of policies, the detennining whetlier the conditions ai'e met, and the activating the 
policies are controlled locally. 



-9- 



33. (New) The method as recited in claim 1 , wherein the associated conditions of the 
poijcies dictate the manner in which the active policies are to be deactivated. 

34 {Nt'w > rhf mfih(.>d a.s rcc-icd claiin K and further comprising detei mining 
whetiier one of the acti\ e pt>iicics is stili acuse inchrding determining whether the 
condition associated mth the active policy is still met. 

35. (New) The method as recited in claim 34, and further comprising de-activating 
the active policy if the associated condition is not met and detennining whether the de- 
activated policy is to be reused or discarded. 

36 (New) The method as recited h\ claim 35, wherein an indication of the 
detemtination whether the de-activated policy is to be reused or discarded is stored with 
the associated condition. 



